System and method for remotely assigning and revoking access credentials using a near field communication equipped mobile phone

ABSTRACT

The present invention is generally directed toward a mobile device that can be used in a secure access system. More specifically, the mobile device can have credential data loaded thereon remotely updated, enabled, disabled, revoked, or otherwise altered with a message sent from, for example, a control panel and/or controller in the system.

CROSS-REFERENCE TO RELATED APPLICATION

The present application claims the benefit, under 35 U.S.C. §119(e), ofU.S. Provisional Application Ser. No. 60/668,828 filed Apr. 5, 2005,which is incorporated herein by this reference.

FIELD OF THE INVENTION

The invention is directed generally to using mobile devices in an accesscontrol system. Specifically, a mobile device utilizing near fieldcommunications protocol (NFC) may be used for controlling access toassets, places, or things by having access credentials remotely assignedand revoked.

BACKGROUND OF THE INVENTION

Radio frequency IDs (RFIDs), like contactless smart cards, storecredential information that can be used later to gain access to anasset. When presented to a reader/interrogator the smart card transmitsthe stored credential information for verification by thereader/interrogator. The reader/interrogator processes the credentialinformation and determines if the smart card being presented is a validsmart card. If the reader/interrogator determines that the credentialinformation on the smart card is valid then the reader/interrogatorsends the initiates any number of actions allowing the holder of thesmart card access to a particular asset.

NFC is a communication method that is showing great promise forcommunication between devices at short range. NFC may be regarded as thesame protocol that is used by contactless smart cards working at 13.56MHz. Several companies are in the process of announcing mobile phonesthat incorporate an NFC chip. The communication protocol of a typicalNFC chip can be seen for instance in Short Form Specification of thePN511-Transmission module, February 2004 from Philips Semiconductors,which is herein incorporated by reference in its entirety.

The protocol used in NFC can vary depending on the mode that the chipand reader/interrogator are in. For example, if an active NFC mode isused, both a reader/interrogator and target are using their own radiofrequency (RF) field to enable communication between each other. Areader/interrogator is powered to generate an RF filed of a particularfrequency, for instance at 13.56 MHz. The target has its own powersupply for digital processing and communications. When the targetreceives a communication from a reader/interrogator, the target uses itsown power supply to generate another RF field to answer thereader/interrogator. Communications can occur back and forth between thereader/interrogator and target. Alternatively, if a passive NFC mode isimplemented, the target answers to a reader/interrogator command in aload modulation scheme. The target is not powered to generate its own RFfield. Rather, the target uses energy from the RF created by thereader/interrogator to create its RF field and reply to be sent back tothe reader/interrogator.

If the NFC chip is coupled with a micro-processor, the chip may act likesmart cards or the like where communication between a reader and cardare performed to gain access to an asset. Typically a mobile phoneincludes a battery and the NFC chip can be powered by that battery. Ifthe chip derives power from the mobile phone battery, the NFC chip maycommunicate with an reader/interrogator according to the active protocoldescribed above. Alternatively, the NFC chip can communicate with areader/interrogator in a passive mode. This will eliminate the need forthe chip to be powered by the battery of a mobile phone, which mayincrease the life of the battery.

In most global system for mobile communication (GSM) devices, e.g.,mobile phones, there is a Subscriber Identification Module (SIM) that isa secure memory containing all of the owner's account information, aswell as space available for additional applications such as anelectronic purse for e-commerce. This memory is accessible from outsideof the mobile device, i.e., remotely. Mobile devices carry a securememory much like smart cards or the like and the new applications in NFCprotocols enable the mobile device to perform functions like smartcards. The ability to have a mobile device also operate as a smart cardcreates a variety of new applications for the device.

Typical smart cards are a small, usually credit card shaped, device thatcontains at least a memory device for storing information and atransceiver to communicate with a reader/interrogator. Thereader/interrogator communicates through the transceiver on the smartcard to access the stored information. The reader/interrogator maysimply read the information, load the information into the memory deviceor modify existing data in the memory device. For example, if the ownerof a smart card uses a smart card containing financial information tomake a purchase, the reader/interrogator can read the informationincluding the owner's identity and the availability of funds. Thereader/interrogator can also deduct the purchase amount from theavailable funds if it has writing capabilities. Further, thereader/interrogator can store transaction data on the smart cardincluding the time and location of the transaction in addition to theidentity of the reader/interrogator.

Smart cards have a variety of uses and can be utilized in anytransaction that involves the exchange of data or information betweenindividuals and an institution. For example, smart cards can be used tostore information including medical records, financial information,vehicle maintenance information, pet information, and a virtuallylimitless variety of other information traditionally printed on paper orplastic or stored on cards having a magnetic stripe or an optical barcode. Smart card technology has been particularly useful in bankingsystems and other financial transaction systems. Furthermore, smartcards have been widely used in access control systems. For example, anreader/interrogator may control doors that provide access to particularassets. The reader/interrogator only allows qualified individualscarrying smart cards, with proper credentials loaded thereon, accessthrough control doors.

In a conventional access control system, the door reader/interrogatorspositioned at ingress/egress points are connected to a control panel.This control panel is kept up to date with the authorized codescorresponding to persons with authorized access to the location. Whenactivity occurs, the control panel is updated with the activityinformation. For example, if the activity related to access gainedthrough a particular door, the door and potentially the person whogained access are stored in the control panel log. Also, if the activityrelated to a financial transaction, the information relating to thetransaction including amount and who performed the transaction are sentand stored at the control panel. There are, however, circumstances inwhich control panels associated with remote locations that are notregularly updated. If a person's status changes from authorized tounauthorized, it might take a relatively long time for the control panelassociated with a remote door to get the message and bar the credentialassociated with this person from access. Furthermore, typical accesscontrol systems are limited in that control panels, either localized orcentral, are the only source that tracks, logs, and monitors theactivity associated with a given access point. When entries take placein these conventional access control systems, the information is sent tothe control panel where it stays. If someone would like to be aware ofactivity associated with the access control system they are usuallyrequired to physically go to the control panel itself.

SUMMARY OF THE INVENTION

It is thus one aspect of the present invention to provide a system andmethod that automatically updates credentials on a mobile deviceimmediately after authorization changes have been made. In oneembodiment, the system and method provides a controller (e.g., a controlpanel, number of control panels, host computer, number of hostcomputers, server, and the like), a plurality of readers, and aplurality of mobile devices. Each of the plurality of mobile devices hasa memory associated with them that stores credential information. Thereaders are typically associated with a particular asset (e.g., a doorpermitting access to a secure room, a computer permitting access tosecure information, a lock permitting access to a safe, etc.). Thereaders communicate with the mobile devices to determine if thecredential information stored on the memory of the mobile device permitsthe person using the mobile device to access a particular asset.Credential information is verified at the reader then transmitted to thecontroller in order to notify security personnel or the like about theactivity that has just taken place at the reader. When credentialinformation is changed at the controller (e.g., access rights for aparticular user of a mobile device have been partially or fully revoked,updated, enabled, augmented, added, etc.), that changed information isrelayed to the mobile device via a communication network. The memory ofthe mobile device is then updated to reflect the change that was loggedat the controller.

As used herein, a “credential” or “credential information” is any data,set of data, encryption scheme, key, and/or transmission protocol usedby a particular mobile device to verify its authenticity with areader/interrogator.

In another embodiment of the present invention, a system and method forperiodically updating and/or enabling the credentials of a mobile deviceand/or reader is provided. Specifically, the controller updates thecredential information of a mobile device on a predetermined periodicbasis. Every predetermined period (e.g., every second, minute, hour,day, etc.) the credentials associated with one or a population of mobiledevices is updated. At the same time, in one embodiment of theinvention, the information relating to the updated credentials isrelayed to the readers so that when a valid mobile device is presentedto a reader, the reader is aware of the updated credentials and canassess the validity of the mobile device appropriately. Alternatively,or in addition to updating the mobile device credentials, the mobiledevices may require a periodic enablement of their credentials in orderto maintain their validity. For example, the credential informationassociated with a particular mobile device may not change, but theinformation will be erased, expire, or the mobile device may not beallowed to transmit its credential information if it does not receivethe periodic enablement messages from the controller. Therefore, when auser is no longer permitted access to a particular asset, the automaticenablement messages are not sent to his/her mobile device. If a user hashad their credentials revoked or changed for whatever reason, they mayattempt to shield their mobile device from receiving any authorizationdisabling messages. By changing the logic of the mobile device such thatthe credentials periodically time out unless an enabling message isreceived from the control panel, attempts to maintain or prolongauthorized credentials by shielding mobile devices from a disablingmessage are thwarted.

In yet another embodiment of the present invention, a system and methodfor relaying information associated with activities detected at a readeror set of readers to a mobile device is provided. Rather than keeping alog of the activity information only at the controller, selected mobiledevices can receive the activity information from the controller. In aresidential lock situation, the system can send a Short Message Service(SMS) message/signaler the like to the mobile device of the homeowner. Ahomeowner at work may want to know when a child, housekeeper, or otherperson enters and exits their house. The selected mobile device couldretrieve the message employing a number of other methods. For example,records of activities at a particular reader can be logged at thatreader. A mobile device authorized to recover the activity log could bepresented to the reader and the log file could be transferred to anddisplayed on the mobile device. Likewise, the reader (or the mobiledevice) could send the log file to a computer via email using varioustypes of text messaging protocols.

These and other advantages will be apparent from the disclosure of theinvention(s) contained herein. The above-described embodiments andconfigurations are neither complete nor exhaustive. As will beappreciated, other embodiments of the invention are possible using,alone or in combination, one or more of the features set forth above ordescribed in detail below.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram depicting an exemplary system for authenticatingmobile devices and remotely updating credentials associated with themobile devices in accordance with embodiments of the present invention;

FIG. 2 is a block diagram depicting a mobile device in accordance withembodiments of the present invention;

FIG. 3 is a flow chart depicting a method of remotely updatingcredentials associated with a mobile device in accordance withembodiments of the present invention;

FIG. 4 is a flow chart depicting a method of periodically updatingcredentials associated with a mobile device in accordance withembodiments of the present invention; and

FIG. 5 is a flow chart depicting a method of relaying access activity inan exemplary system to a mobile device in accordance with embodiments ofthe present invention.

DETAILED DESCRIPTION

The present invention is generally directed toward a system and methodfor using mobile communication devices as personal credentialverification devices. Specifically, the present invention utilizescommunication techniques and protocols to automatically and remotelyupdate credential information associated with one or a set of mobiledevices.

FIG. 1 depicts an access network 100 used to verify the identity of atleast one mobile device. In one embodiment of the present invention, thesystem 100 comprises a controller 102, a hub 104, a plurality of readers108 _(1-n), and a plurality of mobile devices 112 _(1-k) such that n andk are integers wherein n and k are greater than or equal to one, andtypically k is greater than n. The plurality of readers 108 _(1-n) mayinclude readers 108 of the same type, as well as readers of differenttypes. For example, a subset of the plurality of readers 108 _(1-n) maybe legacy readers (e.g. readers using older transmission protocols).Whereas another subset of the plurality of readers 108 _(1-n) may benewer readers utilizing improved and/or more secure protocols.

In the depicted embodiment, the readers 108 are coupled to thecontroller 102 via the interconnecting hub 104 through interfaces 124and 128. In an alternate embodiment, the readers 108 may be directlycoupled to the respective inputs/outputs of the controller 102 viainterface 129. Interfaces 124 and 128 between the readers 108, the hub104, and the controller 102 and interface 129 are generallybi-directional interfaces, which may selectively be implemented in aform of wired, wireless, fiber-optic communication links, orcombinations thereof. Even though the interfaces 124, 128, and 129 aredepicted as bi-directional interfaces, one of skill in art canappreciate that the interfaces 124, 128, and 129 may be implemented asunidirectional interfaces that use a unidirectional communicationprotocol, for example, the Wiegandz protocol.

As can be appreciated by one of skill in the art, the interfaces 124,128, and 129 may be implemented utilizing buses or other types ofconnections. For example, the I/O ports may be one or more of a USBport, parallel port, serial port, Small Computer Systems Interface(SCSI) port, modem, Ethernet, and/or an RF interface. The protocols usedto communicate between the controller 102 and the readers 108 mayinclude one or more of the TCP/IP protocol, RS 232, RS 485, CurrentLoop, Power of Ethernet (POE), Bluetooth, ZigBee, GSM, WiFi, and othercommunication methods and protocols known in the art.

Bi-directional RF interfaces 120 between a reader 108 and a mobiledevice 112 are automatically established when the mobile device 112 isplaced within an active zone (not shown) of the interrogating reader108. The active zone of the reader 108 is defined as a three dimensionalspace where the intensity of RF signals emitted by the reader exceeds athreshold of sensitivity of the mobile device 112 and the intensity ofRF signals emitted by the mobile device 112 exceeds a threshold ofsensitivity of the reader 108. The interface 120 shown can be betweenone or a number of readers 108 and one or a number of mobile devices 11.Furthermore, the interface 120 may utilize known methods and protocolsincluding NFC protocol, Infra Red communication methods, Bluetooth,ZigBee, GSM, WiFi, and/or other protocols known to those of skill in theart.

The controller 102 may be a general-purpose computer adapted formulti-task data processing and suitable for use in various settingsincluding, but not being limited to, business, commercial, residential,and industrial settings. Examples of suitable types of controllers 102include, but are not limited to, a control panel, a number of controlpanels, a host computer, a processor, a server, combinations thereof,and other controllers known to those of skill in the art. A memory ofthe controller 102 comprises software program(s) containing a databaseof records for the access system 100. Alternatively, a database 130 maybe separated from the controller 102 as depicted in FIG. 1. The database130, whether integral to the controller 102, separate from thecontroller 102, or both, maintains records associated with the readers108, mobile devices 112 and their respective holders or users,algorithm(s) for acquiring, decoding, verifying, and modifying datacontained in the mobile device, algorithm(s) for testing authenticityand validity of the mobile devices 112, and algorithm(s) forimplementing the results of these tests. Specific configurations of thecontroller 102 are determined based on and compliant with computing andinterfacing capabilities of the readers 108 and/or the hub 104. As usedherein, in reference to an individual or an object associated with amobile device 112, the terms a “holder” and a “user” are usedinterchangeably.

Each reader 108 is adapted for exchanging information with thecontroller 102 and for requesting data from the mobile device 112 toverify the authenticity of the mobile device. Typically, a reader 108 isassociated with a particular asset (e.g., a door protecting access to asecure room, a computer lock protecting sensitive information orcomputer files, a lock on a safe, and the like). In one embodiment, uponverification of credential information stored on the mobile device 112,the reader 108 generates signals facilitating execution of the resultsof interrogating the mobile device (e.g., engages/disengages a lockingmechanism, allows/disallows movement of a monitored article, temporarilydisables itself, activates an alarm system, provides access to acomputer system, provides access to a particular document, and thelike). Alternatively, the controller 102 may generate such signals.

In addition to being proximity readers (e.g. readers that verifyauthenticity of smart cards, mobile devices and the like) the readers108 may also have additional functionality. The readers 108 may includea keypad or other user input devices for receipt of additional userknown passwords, contact card identification devices, and biometricauthentication devices including voice recognition, retina scanners,finger print analyzers, facial feature analyzers, and the like.

In accordance with embodiments of the present invention, a stand-alonereader 108 may be utilized to perform the functionality of both thereader 108 and the controller 102. This stand-alone reader 108 mayinclude, or have access to, the database 130 that contains data used todetermine the authenticity of a mobile device 112 and/or algorithm(s)used to make the determination of authenticity of the mobile device 112.A determination of authenticity for a mobile device 112 is made at thereceiving point rather than having to transmit data across a networkfrom the reader 108 to a controller 102 in order to make a determinationof authenticity. The stand-alone reader is further operable to executeinstructions based upon the analysis of the mobile device 112.

A user typically carries the mobile devices 112 in order to verifyhis/her identity to a reader 108. Acceptable mobile devices 112 include,mobile cellular phones, personal digital assistants (PDAs),Blackberrys™, or any other mobile communication device that can beenabled for use in the access system 100 described. Essentially, themobile device 112 can perform functions associated with typical mobiledevices and can also act like a smart card, RFID, or other type ofidentification device. Typical identification devices utilize variousprotocols to communicate their credential information to a reader inorder to gain access to a particular asset. The mobile devices 112, inaccordance with embodiments of the present invention, are enabled tocommunicate with readers 108 in a similar fashion to that of smart cardsand the like.

In accordance with embodiments of the present invention, the controller102 is able to communicate with at least one of the plurality of themobile devices 112 using a communication network 116. The communicationnetwork 116 utilized may be a conventional mobile radio network, forexample, a GSM network, a Digital Cellular System (DCS), or PersonalCommunications Systems (PCS). The interface 132 may be a wired orwireless interface allowing the controller 102 to communicate withvarious other entities connected to the communication network 116. Themobile device 112 communicates with the communication network 116 viainterface 136. The communication network 116 provides a way for thecontroller 102 to automatically notify and/or update information to themobile devices 112 related to the access system 100. Additionally, thecommunication network 116 allows mobile devices 112 to communicate witheach other.

Referring now to FIG. 2, an exemplary mobile device 112 will bedescribed in accordance with embodiments of the present invention. Inthe depicted embodiment, the mobile device 112 comprises a memory 200, aprocessor 204, an RF receiver/transmitter 208 including an RFmodulation/demodulation unit 212 and an RF antenna 216 for communicationwith a reader 108, an RF receiver/transmitter 230 including an antenna226 and an RF modulation/demodulation unit 230 for communication withthe communication network 116, an optional RF rectifier 220, and a powersource 224. The processor 204 (e.g., an application specific integratedcircuit (ASIC), microprocessor, programmable controller, or the like)uses bi-directional interfaces to communicate with various other partsof the mobile device 112.

One or more of the above-noted parts of the mobile device may be locatedon a subscriber identification module (SIM) card, which identifies theuser in the communication network 116. SIM cards are already utilizednow in GSM, DCS, or PCS mobile apparatus, among other things. Also, theSIM card may be either a full-sized card or a plug-in card; it isconnected to the mobile device through a contact region (not shown) onthe surface of the card. Other card formats, as well as contact listsSIM cards, may, however, likewise be used within the scope of thisinvention. U.S. Pat. No. 6,859,650 to Ritter, which is hereinincorporated by this reference in its entirety, describes using a SIMcard located in a mobile device and an interface to communicate withexternal devices, without use of a mobile radio network.

As can be seen in FIG. 2, the mobile device 112, in one embodiment,communicates with external devices via two bi-directional interfaces 120and 136. For example, the interface 120 where the RF antenna 216transmits RF signals through free-space to be received by the reader108. The reader 108 has a transceiver mounted thereon to receive the RFsignals transmitted by the mobile device 112. The RF antenna 216 used bythe mobile device 112 to create interface 120 may be a coil made bywinding of a wire, by printing or etching of a conductor film, or withstrip lines. Depending on the application, a transmission frequency, forinstance, of 125 kHz, 13.56 MHz, 400 MHz or 5.2 GHz is used, the appliedfrequency also being dependent on the data transmission where needed. Afrequency of about 13.56 MHz is preferred. However, in order to ensurecompatibility with the readers 108, various other frequencies may beused. Through interface 120, the mobile device 112 and the reader 108can exchange data and programs with each other without contact andwithout making use of the communications network 116. As noted above,the interface 120 is created when the mobile device 112 enters an activeregion of a reader 108.

The memory 200 of the mobile device 112 generally comprises at least onearray of non-volatile memory cells, e.g., static random access memory(SRAM) cells or Flash Memory Cells, among other types of non-volatilememory cells. The memory 200 may also comprise at least one array ofdynamic random access memory (DRAM) cells. Therefore a content of atleast a portion of the memory 200 may be pre-programmed and writeprotected thereafter, whereas the content of other portions of thememory 200 may be selectively modified and/or erased by the controller102 and/or the reader 108.

The mobile device 112, according to embodiments of the presentinvention, is used as an identification device. Identificationinformation is preferably loaded into a secure area of the memory 200where it can be accessed by the processor 204 to communicate to readers208 via interface 120. Information loaded on the memory 200 may includecredential information of the user of the mobile device 112, forinstance, unique IDs, manufacture IDs, passwords, keys, encryptionschemes, transmission protocols, and the like. Additionally, the memory200 may contain executable functions that are used by the processor 204to run other components of the mobile device 112. When presented to areader 108, the RF antenna 216 typically receives interrogating signalsvia interface 120. The interrogating signals are in the form of RFsignals produced by the reader 108.

In accordance with embodiments of the present invention, the memory 200may further comprise self-authenticating data and/or functions. Examplesof self-authenticating data include, but are not limited to, assets themobile device 112 has access to, times of allowed access to each asset,and other data that can assist the mobile device in determining if it iseligible to gain access to a particular asset. The self-authenticatingfunctions use the self-authenticating data to enable the mobile device112 to make a determination of its own access rights with respect to anasset.

A mobile device 112 that determines its own access rights andpermissions is typically referred to as a smart mobile device. Inoperation, a “smart” mobile device 112 is presented to a reader 108. Thereader 108 is associated with one or more assets and the reader 108 isthe gatekeeper of those assets. The reader 108 contains informationabout its associated assets and usually time of day information. Uponpresentation of the mobile device 112 to the reader 108, the reader 108supplies the asset information and time of day information to the mobiledevice 112. The mobile device 112 then analyzes the asset informationand time of day information using its self-authenticating data. Themobile device 112 then makes a determination whether it is allowed toaccess the given asset (e.g., whether the holder of the mobile device112 can have access to a room behind a door, a bank account, computerfiles, etc.) If the mobile device 112 determines that it is allowedaccess to the particular asset, then it sends a signal back to thereader 108 indicating that validation of the mobile device 112 has beenconfirmed and access should be granted. Upon confirmation of validationof the mobile device 112, the reader 108 will unlock the door, accessthe bank account, permit access to the computer files, or perform therequisite steps to grant access to the holder of the mobile device 112.If the mobile device 112 determines that it is not allowed access to theparticular asset, then it can either do nothing or send a signal back tothe reader 108 indicating that validation of the mobile device 112 wasnot confirmed and access should not be granted. Upon the receipt of thissignal, the reader 108 may perform no action, generate a messageindicating that access was not granted, sound an alarm, or perform someother sort of action in accordance with denying the holder of the mobiledevice 112 access to the asset.

In operation, the reader 108 and the mobile device 112 usepre-programmed communication protocols. To increase the probability oferror-free reception, the same messages may redundantly be repeated apre-determined number of times or during a pre-determined timedinterval. The interrogating reader 108 generates an interrogating RFsignal. The interrogating RF signal of the interrogating reader 108 (or,if the protocol used by the mobile device 112 is an active protocol, RFsignals produced by the mobile device 112) is received by the RFIDantenna 216 and is forwarded to the modulation/demodulation unit 212that in turn demodulates the RF signal and provides the demodulatedsignal for processing to the processor 204. Upon receipt of the RFsignal by the processor 204, the memory 200 is accessed and relevantcredential information is retrieved from the memory 200 by the processor204. The retrieved credential information is then passed on to themodulation/demodulation unit 212 where it is modulated and sent to theRF antenna 216. The RF antenna 216 provides the modulated signal back tothe reader 108 via interface 120. At the reader 108 or controller 102the credential information is processed to determine the validity of themobile device 112.

The RF signals generated by the reader 108 inherently containelectromagnetic energy. The signals can be sent to the optional RFrectifier 220 and the energy from those signals can be converted intoenergy to run various components of the mobile device 112. A powersource 224 is also available to supply power to any other component ofthe mobile device 112 depicted or not depicted.

In accordance with embodiments of the present invention, the RFreceiver/transmitter 234 for communication with the communicationnetwork 116 receives update signals (or other communication signals)from the communication network 116. In the event that the signalreceived by the antenna 226 is an update signal from the controller 102,the update signal is sent from the antenna 226 to the RFmodulation/demodulation unit 230 where the signal is demodulated. Thedemodulated signal is sent to the processor 204, which then updates thememory 200 based on the update signal. The RF receiver/transmitter 230also allows the mobile device 112 to communicate with other devicesconnected to the communications network 116.

Referring now to FIG. 3, a method of automatically and remotely updatingcredential information on a mobile device 112 will be described inaccordance with embodiments of the present invention. The method beginsat step 300 then proceeds to step 304 where credential information ischanged at the controller 102. As noted above, credential informationcan include any data, set of data, encryption schemes, keys,transmission protocol, and the like, used by a particular mobile device112 to verify its authenticity to a reader 108. Altering, modifying,enabling, disabling, revoking, adding, and updating any portion of thecredential information may effect a change in the credentialinformation. The credential information changed at the controller 102 isthen updated at the database 130 in step 308. Thereafter, in step 312,information is retrieved from the database 130 by the controller 102relating to what mobile device the changed information was associatedwith. The mobile device corresponding to the changed information is thenidentified as the target device. For example, if the access rights ofone user have been modified, then the mobile device 112 associated withthat user is the only mobile device 112 that needs to have itsrespective memory 200 updated, and thus the single mobile device 112 isthe targeted mobile device 112. Alternatively, a change may relate to anumber of mobile devices 112 and each device will need to receive theupdated information on its respective memory 200. Thus each mobiledevice 112 will become a targeted device.

Once a targeted device is determined in step 312, a message is sent fromthe controller 102 to the determined (targeted) mobile device 112 viathe communication network 116 in step 316. That information is receivedat the mobile device 112 through interface 136 by the antenna 226 thatforwards this information to the RF modulation/demodulation unit 230where the signal is demodulated. The RF modulation/demodulation unit 230then sends the demodulated update signal to processor 204. The processorupdates the memory 200 to reflect the change that was made at thecontroller 102 in step 320.

Referring now to FIG. 4, another method of updating, enabling, and/orrevoking the credentials of a mobile device 112 will be described inaccordance with embodiments of the present invention. The method startsat step 400 and proceeds to step 404 where a time interval betweencredential updates is determined. The time period may vary dependingupon the requirements and security needs of the system 100. For example,the interval may be set to update credentials every second, minute,hour, day or a variation thereof. In step 408, new credentialinformation is determined. As noted above, the new credentialinformation may relate to one or a number of mobile devices 112. In step412, the new credential information is sent to the readers 108.Specifically, the readers 108 need to be made aware of changes ofcredential information if the changes are related to transmissionprotocols, keys, password changes, and the like. In step 416, the newcredential information is sent to the respective mobile devices 112.This process is performed to ensure, for example, only mobile devicesthat are in communication with the communication network 116 have theircredentials updated. Typically, when a user is de-enrolled from anaccess list, a message will be sent via a communication from thecontroller 102 to the mobile device 112 to revoke the associatedcredential information from the memory 200. A message is sent to themobile device 112 immediately when that user is de-enrolled andtherefore any attempts to gain access to the system 100 will be denied.

If the user who is no longer authorized to gain access to the system 100intends to create problems, he/she might try to prevent the memory 200in his/her phone from being de-authorized thereby keeping his/her accesscredentials on the mobile device 112. One way a person might do thiswould be by switching his/her phone off or otherwise shield it from theincoming messages by disabling the antenna 226 or tampering withinterface 136. Thereafter he/she may only turn on and expose the mobiledevice 112 immediately prior to trying to gain access to an assetthrough reader 108. In one embodiment of the present invention, a signal(i.e., an SMS signal) periodically transmitted to the mobile device 112is required to keep the respective credentials active. Changing thesystem 100 logic so that the mobile device's 112 credentials time outperiodically thwarts these attempts to stop a mobile device 112 fromreceiving a disable message. If the mobile device 112 does not receivean enabling message, then the credential information stored thereon willbecome obsolete.

In embodiments employing a smart mobile device 112, the periodicallytransmitted message may be required to keep the self-authenticating dataand/or functions active and up to date. Essentially, a database ofself-authenticating data may have a time out function such that after apredetermined amount of time, the self-authenticating data expires anderases itself. This way when a smart mobile device 112 is presented to areader 108, it will not be able to validate its own access rights andthus will not be able to grant itself access to the asset associatedwith the given reader 108. The self-authenticating data may also bedynamically changing, thus if the mobile device 112 does not receive theupdated version of the authenticating data, it will not be able tovalidate its own access rights.

Other functions of a mobile device 112 may also require periodicupdate/enabling signals in order to allow the smart mobile device 112 tovalidate its own access rights. For example, communications protocols orcommunication frequencies between a reader 108 and a mobile device 112may also periodically change. If the mobile device 112 does not receivethe updated communications directions, it will not be able tocommunicate properly with the reader 108, thus it will not be able togain access to a particular asset.

An alternative embodiment would be to change protocols related to thecommunication interface 120. The changes could be sent via a messageacross the communications network 116 to the mobile device 112 such thatthe mobile device 112 is aware of the rolling or constantly changingcredential information. For example, rolling access codes and keys maybe applied to the readers 108 and the mobile devices 112. Any mobiledevice that is not in communication with the communication network 116will not be updated with these rolling codes and will therefore not beable to be properly validated by reader 108.

In step 420, the amount of elapsed time since the last credential updateis determined and if this time is determined to be greater than or equalto the determined update interval in step 424, the method goes to step408 and new credential information is determined. However, if the timeelapsed is not greater than the update interval, the process repeatsstep 420 until the periodic threshold is reached.

Referring now to FIG. 5, a method of relaying information relating toactivities in an access system will be described in accordance with atleast some embodiments of the present invention. The process starts atstep 500 and then proceeds to step 504 where activity is detected at areader 108. Information related to that activity is determined in step508 and potentially logged. The information may be stored at reader 108and/or sent to controller 102 to be stored in database 130. Thereafter,it is determined if a mobile device 112 is enabled to receiveinformation about the activity that has just occurred in step 512. Ifthere is a mobile device 112 enabled to receive information, theidentity of that mobile device 112 is determined in step 516 by thecontroller 102, using a comparison of access rights and mobile deviceidentities in the database. Otherwise, the logged information is notsent to any mobile device and the method ends at step 524. Once theenabled mobile device(s) 112 is determined in step 516, informationrelating to the activity is sent to the enabled mobile device(s) 112 instep 520.

As noted above, the information relating to the activity may be storedat the reader 108 and logged there. An enabled mobile device 112 may bepresented to reader 108 and the log file of activities that haveoccurred at that particular reader 108 may be relayed to the enabledmobile device 112 in step 520. The information may also be sent to themobile device via communications network 116 from the controller 102.Messages may be sent using an SMS message or other types of textmessages known in the art. Additionally, the message may be sent via avoice recording to the mobile device 112 where the user of the mobiledevice can listen to an audio message rather than viewing a digitalmessage.

The present invention, in various embodiments, includes components,methods, processes, systems and/or apparatus substantially as depictedand described herein, including various embodiments, subcombinations,and subsets thereof. Those of skill in the art will understand how tomake and use the present invention after understanding the presentdisclosure. The present invention, in various embodiments, includesproviding devices and processes in the absence of items not depictedand/or described herein or in various embodiments hereof, including inthe absence of such items as may have been used in previous devices orprocesses, e.g., for improving performance, achieving ease and\orreducing cost of implementation.

The foregoing discussion of the invention has been presented forpurposes of illustration and description. The foregoing is not intendedto limit the invention to the form or forms disclosed herein. In theforegoing Detailed Description for example, various features of theinvention are grouped together in one or more embodiments for thepurpose of streamlining the disclosure. This method of disclosure is notto be interpreted as reflecting an intention that the claimed inventionrequires more features than are expressly recited in each claim. Rather,as the following claims reflect, inventive aspects lie in less than allfeatures of a single foregoing disclosed embodiment. Thus, the followingclaims are hereby incorporated into this Detailed Description, with eachclaim standing on its own as a separate preferred embodiment of theinvention.

Moreover, though the description of the invention has includeddescription of one or more embodiments and certain variations andmodifications, other variations and modifications are within the scopeof the invention, e.g., as may be within the skill and knowledge ofthose in the art, after understanding the present disclosure. It isintended to obtain rights which include alternative embodiments to theextent permitted, including alternate, interchangeable and/or equivalentstructures, functions, ranges or steps to those claimed, whether or notsuch alternate, interchangeable and/or equivalent structures, functions,ranges or steps are disclosed herein, and without intending to publiclydedicate any patentable subject matter.

1. A method of remotely maintaining a secure access system, comprising:receiving, at a secure access system controller, a credential update forat least one user of the secure access system; and in response toreceiving the credential update, said controller automaticallyinitiating a system update process, the system update processcomprising: generating a message comprising information representing thecredential update; determining at least one target for said message,wherein said at least one target comprises at least one mobile deviceassociated with the at least one user; and transmitting said message tosaid at least one target.
 2. The method of claim 1, wherein the systemupdate process further comprises transmitting said message to at leastone of a reader and a database.
 3. The method of claim 1, wherein saidat least one mobile device has a first set of credential data storedthereon, and wherein upon receiving said message from said controller,said first set of credential data is changed to a second different setof credential data and wherein said message is transmitted to said atleast one mobile device without receiving a request for said messagefrom said at least one user.
 4. The method of claim 3, wherein saidfirst set of credential data has at least one of a key, password, uniqueID, encryption scheme, and transmission protocol that is different insaid second set of credential data.
 5. (canceled)
 6. The method of claim1, further comprising, in the event that said at least one mobile devicedoes not receive said message and is subsequently presented to a reader,determining, by said reader, that said at least one mobile device isinvalid.
 7. The method of claim 1, wherein said credential updates arereceived at the controller on a periodic basis.
 8. The method of claim1, further comprising: receiving said message at said at least onemobile device; and modifying at least a portion of memory of said atleast one mobile device according to said updated credentialinformation.
 9. The method of claim 8, wherein said modifying comprisesat least one of disabling and revoking at least a portion of saidmemory.
 10. The method of claim 8, further comprising: disabling atleast a portion of said memory unless an enabling message is received.11. The method of claim 1, further comprising de-enrolling a user of atleast one mobile device from an access list, wherein said credentialupdate is generated in response to de-enrolling said user from saidaccess list.
 12. The method of claim 1, wherein said message istransmitted over a cellular communication network.
 13. The method ofclaim 1, wherein said message is transmitted by at least one of a radiofrequency signal and a near field communication signal.
 14. The methodof claim 1, further comprising: presenting said at least one mobiledevice to a reader; generating a second message comprising informationrelated to said at least one mobile device being presented to saidreader; and sending said second message to at least one of a database,controller, and another mobile device.
 15. The method of claim 14,wherein said second message is sent via a short message service (SMS)message.
 16. A secure access system, comprising: at least one mobiledevice comprising memory, wherein said memory comprises credentialinformation; a controller that is operable to receive a credentialupdate for at least one user of the secure access system and in responseto receiving the credential update automatically initiate a systemupdate process, wherein during the system update process the controlleris operable to automatically cause a message to be generated thatcomprises said updated credential, and cause said message to betransmitted to said at least one mobile device associated with said atleast one user.
 17. The system of claim 16, further comprising: at leastone reader for determining an authenticity of said at least one mobiledevice; and a database for maintaining information related to saidsystem, wherein said controller is further operable to cause a secondmessage to be generated that comprises said updated credential and causesaid second message to be transmitted to at least one of said reader andsaid database.
 18. The system of claim 17, wherein, in the event thatsaid at least one mobile device does not receive said message,credentials of said at least one mobile device become obsolete.
 19. Thesystem of claim 18, wherein, upon presentation of said at least onemobile device to said at least one reader, the authenticity of said atleast one mobile device is determined to be invalid.
 20. The system ofclaim 16, wherein credential information on said memory is altered inresponse to receiving said message and wherein said credential update isinitiated by an entity other than said at least one user.
 21. The systemof claim 20, wherein said credential information altered on said memorycomprises at least one of a key, password, unique ID, encryption scheme,and transmission protocol.
 22. (canceled)
 23. The system of claim 16,wherein credential updates are received at said controller on a periodicbasis.
 24. The system of claim 16, wherein credential information onsaid memory is at least one of disabled and revoked in response toreceiving said message.
 25. The system of claim 16, wherein said mobiledevice comprises a timing-out mechanism, wherein said timing-outmechanism is operable to disable said memory unless an enabling messageis received from said controller.
 26. The system of claim 16, whereinsaid controller causes said message to be transmitted to said mobiledevice via at least one of a global system for mobile communications, adigital cellular system, and a personal communications system.
 27. Thesystem of claim 16, wherein said at least one mobile device is at leastone of a cellular phone, and personal digital assistant.
 28. The systemof claim 16, wherein said credential update is initiated in response tode-enrolling at least one user from a list of authorized users.
 29. Thesystem of claim 16, wherein said at least one mobile device comprises aplurality of mobile devices, and wherein credential information in eachone of the plurality of mobile devices is altered.
 30. The system ofclaim 16, wherein said at least one mobile device comprises a pluralityof mobile devices, and wherein credential information in less than allof the plurality of mobile devices is altered.
 31. The system of claim16, wherein said message is transmitted via at least one of a radiofrequency and near field communication signal.
 32. The system of claim16, wherein said message is transmitted via a cellular communicationsnetwork.
 33. A mobile device for use by a user in a secure accesssystem, comprising: a memory, wherein said memory comprises credentialinformation; and an interface operable to communicate with a reader andfurther operable to receive messages relating to updated-credentialinformation, wherein, upon receipt of a first message, said credentialinformation for the user is automatically changed from a first state toa second state and wherein said messages relating to updated-credentialinformation are received without said at least one user transmitting arequest for said messages.
 34. The device of claim 33, wherein, in theevent that said first message is not received, said credentialinformation is maintained in said first state and as a result becomesobsolete.
 35. The device of claim 34, wherein said reader is operable todetermine an authenticity of said mobile device based at least in partupon said credential information, and upon presentation of said mobiledevice to said reader, the authenticity of said mobile device isdetermined to be invalid.
 36. The device of claim 33, wherein saidreader is associated with a controller and the controller is operable todetermine an authenticity of said mobile device based at least in partupon said credential information.
 37. The device of claim 36, whereinsaid reader is operable to determine an authenticity of said mobiledevice based at least in part upon said credential information.
 38. Thedevice of claim 33, wherein said credential information comprises atleast one of a key, password, unique ID, encryption scheme, andtransmission protocol.
 39. The device of claim 33, wherein said at leastone of a key, password, unique ID, encryption scheme, and transmissionprotocol is different in said first state than in said second state. 40.(canceled)
 41. The device of claim 33, further comprising a timing-outmechanism, wherein said timing-out mechanism is operable to disable saidmemory unless an enabling message is received.
 42. The device of claim33, wherein a near field communications protocol is used by said firstinterface to communicate with said reader.
 43. The method of claim 1,wherein said credential update is pushed toward said at least one mobiledevice without any solicitation by said at least one mobile device or auser of said at least one mobile device.
 44. The system of claim 16,wherein said credential update is pushed toward said at least one mobiledevice without any solicitation by said at least one mobile device or auser of said at least one mobile device.